Skip to content

Glossary · Updated

eIDAS

eIDAS is the EU regulation (No 910/2014) on electronic identification and trust services, including electronic signatures.

A ring of stars around a signed document and a shield

What does eIDAS mean?

eIDAS is the European Union regulation on electronic identification and trust services, Regulation (EU) No 910/2014, which sets EU-wide rules for electronic signatures, seals, timestamps and related services. Because it is a regulation rather than a directive, it applies directly in every member state, giving businesses one legal framework instead of 27 separate ones. It was significantly amended in 2024 by Regulation (EU) 2024/1183, often called eIDAS 2.0, which introduces the European Digital Identity Wallet.

For signatures, eIDAS defines three levels. A simple electronic signature is any data in electronic form used by the signatory to sign. An advanced electronic signature must be uniquely linked to and capable of identifying the signer, created with data under their sole control, and linked to the signed data so later changes are detectable. A qualified electronic signature is an advanced signature created with a qualified signature creation device and based on a qualified certificate issued by a qualified trust service provider.

The legal consequences differ. Article 25 says an electronic signature cannot be denied legal effect or admissibility as evidence solely because it is electronic or does not meet the qualified requirements. Only a qualified electronic signature, however, automatically has the equivalent legal effect of a handwritten signature and must be recognized across all member states.

Take a German startup selling software subscriptions to customers in France and Spain. Its standard terms and order forms can be signed with simple electronic signatures, which are admissible across the EU. If it later needs to sign a document where national law demands a handwritten-equivalent signature, it would turn to a qualified signature from a QTSP.

A frequent misconception is that eIDAS requires qualified signatures for business contracts. It does not. Most commercial agreements have no form requirement, and national law decides where stricter formality applies. Another is that eIDAS covers only signatures; it also governs electronic seals for organizations, timestamps, registered delivery and website authentication certificates.

Our take: eIDAS gets described as complicated, but the core idea is sensible: match the assurance level to the risk. Many teams over-buy qualified signatures for routine paperwork. Understand which of your documents genuinely need them, and use simpler tools for the rest.

eSignSimple offers simple electronic signatures under the eIDAS scale, supported by an audit trail, certificate of completion and SHA-256 document hash with a public /verify page. We do not currently provide advanced or qualified signatures.

What is an example of eidas?

A Dutch web studio signs a design contract with a client in Spain. Under eIDAS, the client's simple electronic signature on an eSignSimple link is admissible as evidence in both countries, and the audit trail helps prove who signed. If the Spanish client were instead submitting a document to a public authority that demands a qualified electronic signature, a simple signature would not be enough.

What changed with eIDAS 2 (Regulation (EU) 2024/1183)?

The 2024 amendment entered into force in May 2024 and leaves the three signature levels and the non-discrimination rule of Article 25 in place. Its headline change is the European Digital Identity Wallet: every member state must make at least one wallet available to its citizens and residents, which people can use to prove identity and attributes online and to create qualified electronic signatures. The regulation provides that wallet users should be able to create qualified signatures free of charge for non-professional purposes, within limits member states may set. Wallet roll-outs are being phased in, so availability varies by country.

eIDAS 2 also adds new qualified trust services: electronic attestations of attributes (verified facts such as a diploma or a professional licence), electronic archiving, electronic ledgers and the management of remote qualified signature creation devices. For a small business signing ordinary contracts, little changes day to day. Over time, the wallet may make qualified signatures far cheaper and quicker for individuals, which could shift which documents people choose to sign at the qualified level.

Signatures, seals and timestamps: which eIDAS trust service do you need?

Under eIDAS, an electronic signature is made by a natural person. When an organization wants to prove that a document came from it, rather than from a named employee, the matching tool is an electronic seal, which works much like a signature but belongs to a legal person. A qualified electronic seal benefits from a presumption of the integrity of the data and the correctness of its origin. Invoices, certificates and official letters issued in bulk are typical uses.

A qualified electronic timestamp carries a presumption that the date and time it shows are accurate and that the data has not changed since. It is useful when the question in a dispute is when something existed, for example the date a design was finalized. Qualified electronic registered delivery gives a presumption about sending and receipt. And qualified website authentication certificates identify who operates a website. Knowing these exist helps you ask for the right thing instead of defaulting to the most expensive signature level.

Does eIDAS apply outside the EU?

eIDAS applies in the 27 member states and has been incorporated into the EEA Agreement, so Norway, Iceland and Liechtenstein follow it too. The United Kingdom kept a domestic version of the rules after Brexit, alongside its own long-standing law on electronic signatures; see our United Kingdom legality page. Switzerland has its own e-signature law, known as ZertES, with its own qualified level, covered on our Switzerland page.

If you are a US or other non-EU company signing with an EU customer, eIDAS still matters in practice: an EU court would assess the signature under it. The good news is that the same logic applies as at home. Most commercial contracts have no form requirement, a simple electronic signature is admissible, and you only need to step up when a specific national rule demands it. Our European Union legality overview summarizes where member states add their own requirements.

Which terms are related?

  • Electronic signature: An electronic signature is any electronic sound, symbol or process attached to a record and adopted by a person with the intent to sign it.
  • Simple electronic signature (SES): A simple electronic signature is the basic eIDAS level: data in electronic form used by a signer to sign, such as a typed or drawn signature.
  • Advanced electronic signature (AES): An advanced electronic signature is uniquely linked to and identifies the signer, is under their sole control and detects later changes to the data.
  • Qualified electronic signature (QES): A qualified electronic signature is an advanced signature created with a qualified device and backed by a qualified certificate from a QTSP.
  • Qualified trust service provider (QTSP): A QTSP is a provider granted qualified status by an EU supervisory body to issue qualified certificates and other qualified trust services.

Frequently asked questions

What are the three levels of electronic signature under eIDAS?

eIDAS defines simple (basic) electronic signatures, advanced electronic signatures, which must be uniquely linked to and capable of identifying the signer and detect later changes, and qualified electronic signatures, which are advanced signatures created with a qualified device and based on a qualified certificate. Only qualified signatures automatically have the same legal effect as a handwritten signature across the EU.

Is eIDAS still in force after eIDAS 2.0?

Yes. Regulation (EU) No 910/2014 remains the base law and was amended by Regulation (EU) 2024/1183, often called eIDAS 2.0, which adds European Digital Identity Wallets and new trust services. The three signature levels and the rule that electronic signatures cannot be refused as evidence merely for being electronic continue to apply.

Which eIDAS level does eSignSimple offer?

eSignSimple offers simple electronic signatures only. They are legally recognized under eIDAS and fit most commercial contracts, backed by an audit trail, a certificate of completion and a SHA-256 hash. We do not provide advanced or qualified signatures, so documents that legally require those levels need a qualified trust service provider.

Did eIDAS replace national e-signature laws?

It replaced the earlier Electronic Signatures Directive (1999/93/EC) and harmonized the rules on signatures and trust services, applying directly in every member state since July 2016. National law still decides which documents need a particular form, such as a handwritten or qualified signature, a notary or a witness, so you still need to check the country-specific rules.

Can a company outside the EU use a qualified electronic signature?

Yes. A person anywhere can obtain a qualified certificate from a qualified trust service provider on an EU trusted list, as long as they complete its identity verification. The signature then has qualified status in the EU. Outside the EU, its legal effect depends on local law, which may simply treat it as an ordinary electronic signature.

Get your next document signed today.

Start with 3 free documents a month. No card needed.